Skip to content

Commit

Permalink
Merge pull request #12391 from Mab879/ffix_net-snmp
Browse files Browse the repository at this point in the history
Fix rules from the net-snmp component
  • Loading branch information
marcusburghardt authored Sep 18, 2024
2 parents ce7c328 + cbfde5b commit a15b5b0
Show file tree
Hide file tree
Showing 4 changed files with 5 additions and 5 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ title: 'Ensure SNMP Read Write is disabled'
description: |-
Edit <tt>/etc/snmp/snmpd.conf</tt>, remove any <tt>rwuser</tt> entries.
Once the read write users have been removed, restart the SNMP service:
<pre>$ sudo service snmpd restart</pre>
<pre>$ sudo systemctl restart snmpd</pre>
rationale: |-
Certain SNMP settings can permit users to execute system behaviors from user
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ description: |-
<tt>public</tt> and <tt>private</tt>.
This profile configures new read-only community string to <tt>{{{ xccdf_value("var_snmpd_ro_string") }}}</tt> and read-write community string to <tt>{{{ sub_var_value("var_snmpd_rw_string") }}}</tt>.
Once the default community strings have been changed, restart the SNMP service:
<pre>$ sudo service snmpd restart</pre>
<pre>$ sudo systemctl restart snmpd</pre>
rationale: |-
Whether active or not, default simple network management protocol (SNMP) community
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ title: 'Configure SNMP Service to Use Only SNMPv3 or Newer'
description: |-
Edit <tt>/etc/snmp/snmpd.conf</tt>, removing any references to <tt>rocommunity</tt>, <tt>rwcommunity</tt>, or <tt>com2sec</tt>.
Upon doing that, restart the SNMP service:
<pre>$ sudo service snmpd restart</pre>
<pre>$ sudo systemctl restart snmpd</pre>
rationale: |-
Earlier versions of SNMP are considered insecure, as they potentially allow
Expand Down
4 changes: 2 additions & 2 deletions shared/macros/01-general.jinja
Original file line number Diff line number Diff line change
Expand Up @@ -660,14 +660,14 @@ JINJA MACRO ERROR - Unknown init system '{{{ init_system }}}'.

Example output::

$ sudo dnf erase remove package
$ sudo dnf remove package

:param package: Package to remove
:type package: str

#}}
{{%- macro dnf_package_remove(package) %}}
$ sudo dnf erase {{{ package }}}
$ sudo dnf remove {{{ package }}}
{{%- endmacro %}}


Expand Down

0 comments on commit a15b5b0

Please sign in to comment.